Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fqAJFXsfPqY8WYHIemo7xFXhcd0.cer
File: fqAJFXsfPqY8WYHIemo7xFXhcd0.cer (raw, json)
Hash identifier: FcVI22uS3fGIo0HvUAID83Jpb0UQmlMYj3yKgUl9AXc=
Subject key identifier: 7E:A0:09:15:7B:1F:3E:A6:3C:59:81:C8:7A:6A:3B:C4:55:E1:71:DD
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 37BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/fqAJFXsfPqY8WYHIemo7xFXhcd0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:53:04 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 157.20.246.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14267 (0x37bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Sep 27 02:53:04 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7EA009157B1F3EA63C5981C87A6A3BC455E171DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4b:15:53:5e:e1:5c:36:49:fc:2c:4b:8f:4f:
da:17:f9:23:42:df:46:fd:02:d7:50:b3:18:77:07:
f9:bc:f6:68:13:11:e5:22:3d:23:16:69:5d:6c:75:
a6:de:f8:e3:47:2f:b0:10:0c:f4:55:1f:d2:64:7a:
5d:0f:b6:16:2b:53:75:09:5f:9b:2d:09:dd:e3:1c:
28:1e:f5:a0:8c:c0:1c:9d:d5:7b:70:aa:31:45:5b:
05:ce:b6:4e:b9:a9:3f:98:de:9a:3a:00:6b:bd:e3:
51:20:2b:1d:9d:51:01:20:c0:74:63:8c:fc:dc:a9:
1f:a2:9c:ac:dd:04:1e:3b:89:fa:fa:f1:f2:2b:1b:
7e:1d:b5:7d:d5:19:23:1d:e3:af:a5:75:ab:d8:7d:
6c:19:fd:e4:5f:e0:13:59:05:fb:ca:1f:f5:7b:24:
32:58:e8:c9:f1:82:4f:19:10:6b:5c:0f:b9:bd:2d:
29:51:d5:fb:12:18:bc:55:c6:a7:27:b3:f3:06:6d:
5d:19:1d:f8:0a:5b:2a:03:22:90:33:64:f0:71:db:
0f:e9:f9:cb:db:89:10:f8:c1:db:ba:a7:46:7f:d2:
3e:9e:c4:62:49:9a:44:e2:f0:7e:38:5b:89:e7:b7:
73:7e:b5:82:fc:94:96:0d:ce:b1:d5:4d:b7:8a:2d:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A0:09:15:7B:1F:3E:A6:3C:59:81:C8:7A:6A:3B:C4:55:E1:71:DD
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/fqAJFXsfPqY8WYHIemo7xFXhcd0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.246.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:fd:f1:0b:b8:c0:86:2e:c7:25:0a:16:64:91:a0:90:3a:53:
2d:43:03:30:68:18:5e:23:14:a6:e8:b1:bc:bd:35:ef:c5:fd:
9f:5c:9e:c9:87:fd:a9:5f:25:50:4a:bb:36:c2:d0:1c:77:71:
ff:42:4e:f9:6c:78:70:14:30:75:f3:4c:cb:ad:90:29:91:5c:
75:f7:cc:71:62:8e:ba:f9:7a:1b:2d:5a:20:66:6d:bd:1f:50:
9f:5d:51:2d:24:52:d7:6a:67:f3:ba:74:74:d5:32:65:cc:bd:
8f:80:ed:84:bf:d7:11:e7:33:66:5f:58:30:36:1b:de:b3:2b:
f9:a3:cc:31:7a:b3:f5:d6:f4:3d:4e:98:78:7e:c2:e1:1a:a0:
5b:65:09:3d:1b:32:89:1f:83:94:72:8e:16:58:3b:66:5c:f9:
ff:54:b3:91:fa:b8:bf:03:e4:99:f6:b0:75:21:d4:56:82:8e:
e7:04:c4:f2:d8:16:16:5f:2f:34:f4:ab:a7:2c:ef:84:d0:27:
d8:95:80:7d:ee:05:10:ff:f5:1d:cd:e5:ef:83:ab:f0:b0:4a:
37:2a:62:6e:31:4b:57:e4:4a:46:c8:7c:12:f6:a5:9f:82:cb:
90:8f:65:dc:c3:b4:95:c1:38:5d:cf:a7:a6:10:1d:df:ee:fa:
91:37:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:45 2025 by rpki-client